Using D&B update monitoring via CDQ requires an AWS Bucket managed by CDQ. This bucket also serves as a source for certain calls to D&B that generate files as response, e.g. list of DUNS subscribed to monitoring. This information should be accessible to the customer.
Solution proposal:
Create a new user role "DNB_MANAGER".
All files from the AWS bucket related to the organization of a user with such role, should be accessible via the file sharing app of such user.
To limit storage usage either links to the files (without access to the whole AWS bucket) should be provided or the number of users with the user role "DNB_MANAGER" should be limited.